Hmm, podman also creates rules in the nat table if that's what you're talking about--_if_ you tell it to publish ports.